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Abstract:-A visual cryptography scheme is a secret sharing scheme to encode a secret image SI in such a way that 
any qualified subset of participants can "visually" recover the secret image, while forbidden subsets have no 
information on SI. A "visual" recovery consists of xeroxing the shares, which are shadow images, onto 
transparencies and stacking them one on the top of the others. The participants in a qualified subset will be able to 
see the secret image without any knowledge of cryptography and without performing any cryptographic 
computation. Visual cryptography is a powerful tool for teaching cryptography to general audience. Applications 
have also been proposed to realize authentication, identification schemes and, recently, e voting schemes. 

Index Terms: -Color meaningful shares, digital halftoning, error diffusion, secret sharing, visual cryptography 
(VC). 

I. INTRODUCTION 

Visual Cryptography (VC) is a type of secret sharing scheme introduced by Naor and Shamir. In a k-out-of-n 
scheme of VC, a secret binary image is cryptographically encoded into n shares of random binary patterns. The n shares are 
xeroxed onto n transparencies, respectively, and distributed amongst participants, one for each participant. No participant 
knows the share given to another participant. Any or more participants can visually reveal the secret image by superimposing 
any k transparencies together. The secret cannot be decoded by any k-lor fewer participants, even if infinite computational 
power is available to them. 

VC scheme proposed by Naor and Shamir serves as a basic model and has been applied to many applications. 
Aside from the obvious applications to information hiding, there are many applications of VC, which include general access 
structures, copyright protection, watermarking, visual authentication and identification, print and scan applications, etc. Each 
pixel p from a secret binary image is encoded into m black and white sub pixels in each share. If p is a white (black) pixel, 
one of the six columns is selected randomly with equal probability, replacing . Regardless of the value of the pixel, it is 
replaced by a set of four sub pixels, two of them black and two white. Thus, the subpixel set gives no clue as to the original 
value of p . When two subpixels originating from two white are superimposed, the decrypted subpixels have two white and 
two black pixels. On the other hand, a decrypted subpixel having four black pixels indicates that the subpixel came from two 
black pixels. 

Several new methods for VC have been introduced recently in the literature. Blundo proposed an optimal contrast 
k-out-of-n scheme to alleviate the contrast loss problem in the reconstructed images. Ateniese proposed a more general 
method for VC scheme based upon general access structure. The access structure is a specification of qualified and forbidden 
subsets of shares. The participants in a qualified subset can recover the secret image while the participants in a forbidden 
subset cannot. The VC scheme concept has been extended to grayscale share images rather than binary image shares. Blundo 
proposed VC schemes with general access structures for grayscale share images. Hou transformed a gray-level image into 
halftone images and then applied binary VC schemes to generate grayscale shares. Although the secret image is grayscale, 
shares are still constructed by random binary patterns carrying visual information which may lead to suspicion of secret 
encryption. 

Visual secret sharing for color images was introduced by Naor and Shamir based upon cover semigroups. Rijimen 
presented a 2-out-of-2 VC scheme by applying the idea of color mixture. Stacking two transparencies with different colors 
rises a third mixed color. Hou shares by applying halftone methods and color decomposition. Hou decomposed the secret 
color image into three (yellow, magenta and cyan) halftone images. He then devised three colored 2-out-of-2 VC schemes 
which follow the subtractive model for color mixture by exploiting some of the existing binary VC schemes. 




(c» Hi) 

Figure :An Example of 2-out of-2 Scheme 
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All of the previously mentioned methods, however, discuss color schemes for 2-out-of-2 or 2-out-of-2 secret 
sharing where the reconstructed colors are interpreted by some mixing rules of colors. Other approaches to color VC 
attempting to generate meaningful color shares include. These methods, however, produce shares with low visibility due to 
color inconsistency across color channels as discussed in the experiment section of this paper. Ching-Nung Yand and Tse- 
Shih Chen proposed a VCS for color images based upon an additive color mixing method . In this scheme, each pixel is 
expanded by a factor of three. We found that this scheme suffers from the problem of pixel expansion in the size of 
encrypted shares. 

II. OUR APPROACH 

In order to reduce the size of encrypted shares we propose the VC for color image using visual information pixel 
(VIP) synchronization with error diffusion technique. This VC for color image using visual information pixel (VIP) 
synchronization with error diffusion technique introduces a color VC encryption method which leads to meaningful shares 
and is free of the previously mentioned limitations. The method is simple and efficient. It relies on two fundamental 
principles used in the generation of shares, namely, error diffusion and VIP synchronization. Error diffusion is a simple but 
efficient algorithm for image halftone generation. 

The quantization error at each pixel is filtered and fed to future inputs. The error filter is designed in a way that the 
low frequency differences between the input and output images are minimized and consequently it produces pleasing 
halftone images to human vision. Synchronization of the VIPs across the color channels improves visual contrast of shares. 
In color VC schemes, the colors of encrypted pixels and the contrast can be degraded due to random matrix permutation. 
Random matrix permutations are key security features in VC schemes. In grayscale VC schemes, it does not affect the visual 
quality; however, in color schemes, independent execution of random matrix permutation for each color channel can cause 
color distortion by placing VIPs at random positions in subpixels which finally degrades the visual quality. VIP 
synchronization prevents the color and contrast of original images from degradation even with matrix permutation. 

III. VISUAL CRYPTOGRAPHY 

Cryptography is, traditionally, the study of means of converting information from its normal, comprehensible form 
into an incomprehensible format, rendering it unreadable without secret knowledge — the art of encryption. In the past, 
cryptography helped ensure secrecy in important communications, such as those of spies, military leaders, and diplomats. In 
recent decades, the field of cryptography has expanded its remit in two ways. Firstly, it provides mechanisms for more than 
just keeping secrets: schemes like digital signatures and digital cash, for example. Secondly, cryptography has come to be in 
widespread use by many civilians who do not have extraordinary needs for secrecy, although typically it is transparently 
built into the infrastructure for computing and telecommunications, and users are not aware of it. 

The first visual cryptographic technique was pioneered by Moni Naor and Ad Shamir inl994. It involved breaking 
up the image into n shares so that only someone with all n shares could decrypt the image by overlaying each of the shares 
over each other. Practically this can be done by printing each share on a separate transparency and then placing all of the 
transparencies on top of each other. In their technique n-1 shares revealed no information about the original image. Visual 
Cryptography is a graphical form of information concealing. It can be seen as a cryptographic primitive, since it offers 
methods and technologies for building more complex information security systems.The techniques of visual cryptography 
are inspired from the general secret sharing schemes as presented by Adi Shamir and G.R. Blakley. The main difference 
between the visual and the general secret sharing schemes is that for the first ones the secret will be visually reconstructed in 
the decryption phase. 

On special interest are the extended visual cryptography schemes for "natural images" - continuous tone gay 
images. In a two-out-of-two extended visual cryptography scheme, the two shares the secret image is split into are 
"innocent" images hiding the very intention of sending a secret message. Further contributions are made considering the 
applications of visual cryptography in e-commerce, especially for scenarios that involve the presence of a corrupt Post of 
Sale (POS).Being an one-time-pad method, visual cryptography is information-fheoretically secure. That means, its security 
derives purely from the information theory. This aspect makes visual cryptography interesting since the security of the most 
actual cryptographic primitives is based on the difficulty of solving hard mathematical problems. 

Steganography is the art and science of hiding the fact that communication is taking place. Using steganography, 
you can embed a secret message inside a piece of unsuspicious information and send it without anyone knowing of the 
existence of the secret message. Steganography and cryptography are closely related. Cryptography scrambles messages so 
they cannot be understood. Steganography on the other hand, will hide the message so there is no knowledge of the existence 
of the message in the first place. In some situations, sending an encrypted message will arouse suspicion while an "invisible" 
message will not do so. Both sciences can be combined to produce better protection of the message. In this case, when the 
Steganography fails and the message can be detected, it is still of no use as it is encrypted using cryptography techniques. 
Generally (k, n)-VC scheme encrypts a secret message into shares to be distributed to n participants. Each share shows 
noise-like random black and white patterns and does not reveal any information of the secret image by itself. In a k -out-n of 
scheme, access to more than k shares allows one to recover the secret image by stacking them together, but access to less 
than k shares is not sufficient for decryption. A black and white (k,n)-VC scheme consists of two collections of random 
binary matrices SO and SI , having elements denoted by 1 for a black pixel and for a white pixel. To encrypt a white 
(black) pixel, a dealer randomly chooses one of the matrices in S0(S1) and distributes its rows to the n participants. More 
precisely, a formal definition of the black and white (k, n) -VC scheme is given next. 

Definition 1: Let k, n and h be nonnegative integers satisfying 0<=k<=n and 0<=h<=m The two collections of n*m binary 
matrices SO and SI constitute a black and white (k, n)-VC scheme if there exists a value alpha(>0). satisfying the following. 
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Contrast: for any S belongs to SO the OR operation k out of n of s is a vector v that satisfies w(v)<=h-alpha(m) where w(v) 
is the hamming weight of the vector v, m is the pixel expansion of the scheme and alpha is the contrast of the scheme. 
Contrast: for any S belongs to SI the OR operation of any k out of n of s is a vector v that satisfies w(v)>h. 

The security of any il<i2< <in in {1,2 n} with t<k .The two collections of tRm matrices Di.j=0/1, obtained by 

restricting each n*m matrix in Si.j=0/1. To rows il,i2,...,ii are indistinguishable in the sense that they contain the same 

matrices. In the previously mentioned definitions, the first two contrast conditions ensure that the stacking of k out of n 

shares can recovered the secret image. That means no matter what the secret message pixel is or 1, the expected 

appearances of a restricted matrix Dj is same i.e, DO and Dl are equal to a column permutation of the other in all possible 

ways. 

Based upon the principle of VC, extended VC has been proposed whose shares take meaningful images rather than random 

noise-like patterns to avoid suspicion. 

Extended VC: 

Generally, a (k, n ) -EVC scheme takes a secret image and n original images as input and produces n encrypted 
shares with approximation of original images that satisfy the following three conditions: 

♦ Any out of shares can recover the secret image. 

♦ Any less than shares cannot obtain any information of the secret image. 

♦ All the shares are meaningful images; encrypted shares and the recovered secret image are colored. 

Denote S c c c "" as the collection of matrices from which the dealer chooses a matrix to encrypt, where c,C!,c 2 ....c n G {0,1} 

for i=l,2, n.Cj is the bit of the pixel on the ith original image and is the bit of the secret message. For a black and c 

white(k ,n) -EVC scheme, we have to construct 2 A n pairs of such collection {S clc2 cn ,Si clc2 cn } one for each possible 

combination of white and black pixels in the n original images. 

IV. COLOR MODELS 

The additive and subtractive color models are widely used to describe the constitutions of colors. In the additive 
color model, the three primary colors are red, green, and blue (RGB), with desired colors being obtained by mixing different 
RGB channels. By controlling the intensity of red, green, blue channels, we can modulate the amount of red, green, blue in 
the compound light. The more the colors are mixed, the more the brightness of the light. When mixing all red, green and blue 
channels with equal intensity, white color will result. The computer screen is a good example of the additive color model. In 
the subtractive model, color is represented by applying the combination of colored lights reflected from the surface of an 
object. By mixing cyan, magenta and yellow pigments, we can produce a wide range of colors. The more the pigments are 
added, the lower the intensity of the light is and, thus, the darker the light is. This is the reason it is called the subtractive 
model. Cyan, magenta, and yellow are the three primitive colors of pigment which cannot be composed from other colors. 
The color printer is a typical application of the subtractive model and, hence, the VC model of Naor and Shamir is also of 
such kind. the color of the pixel R(p,q) can be expressed in a binary form as 

R(p,q)=R( P .qV2 8 ' i where {i=l,2,..,8} 
denotes the binary vector at the ith bit-level with i=l denoting the most significant bit. 

Error Diffusion: 

Error diffusion is a simple yet efficient way to halftone a grayscale image. The quantization error at each pixel is 
filtered and fed into a set of future inputs. Fig. 3 shows a binary error diffusion diagram where f(m, n) represents the pixel at 
(m,n) position of the input image. d(m, n) is the sum of the input pixel value and the diffused errors, g(m, n) is the output 
quantized pixel value. Error diffusion consists of two main components. 
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Figure :Error Diffusion Block Diagram 

The first component is the thresholding block where the output g(m ,n) is given by 

g(m,n) = 1 , if d(m,il) > t(m,n) 

, Otherwise — <. 

The threshold t(m, n) can be pBsition dependant. The second component is the error filter h(k, 1) where the input e(n, m) is 
the difference between d(m ,n) and g(n ,m). Finally, we compute d(m, n) 

d(m,n) = f(m,n) - £ h(k,l) e(m-k,n-l) 
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Where h(k,l) G H. H is a2-D filter. A widely used filter is the error weight originally proposed by Floyd and Steinberg 
K(k,0 = 3^ x [ 3 5 I] 

where • is the current processing pixel. The recursive structure of the block diagram indicates that the 
quantization error e(m.n) depends upon not only the current input and output but also the entire past history. The error filter 
is designed in such a way that the low frequency difference between the input and output image is minimized. The error that 
is diffused away by the error filter is high frequency or "blue noise." These features of error diffusion produce halftone 
images that are pleasant to human eyes with high visual quality. 

The encryption method for color meaningful shares with a VIP synchronization and error diffusion. First, we describe the 
VC matrix derivation method for VIP synchronization from a set of standard VC matrices. We then introduce an error 
diffusion process to produce the final shares. The halftone process is independently applied to each cyan (C), magenta (M), 
and yellow (Y) color channel so each has only one bit per pixel to reveal colors of original images. A secret message is 
halftoned ahead of the encryption stage. 

Matrix Derivation With VIP Synchronization: 

Our encryption method focuses on VIP synchronization across color channels. VIPs are pixels on the encrypted 
shares that have color values of the original images, which make the encrypted shares meaningful. In each of the m 
subpixels of the encrypted share, there are X number of VIPs, denoted as ci and the remaining (m-X.)pixels deliver the 
message information of the secret message image. Thus, in our method, each subpixel m carries visual information as well as 
message information, while other methods extra pixels are needed in addition to the pixel expansion to produce meaningful 
shares. Since each VIP is placed at the same bit position in subpixels across the three color channels, VIP represents accurate 
colors of the original image. First, we derive the basis matrices from a given set of matrices used in standard VC scheme. We 
first generates a set of basis matrices S c cl ' c2 ' "" cn (C,C 1 ,C 2 ,...,C n G {0,1}) where C is a bit pixel from the message image and 
(C,Ci,C2,. . .,C n ) indicate the corresponding pixel bits from the original images. In each row of S c c ' c ' "' cn there are X number 
of Q and the values are unknown in the matrix derivation stage. 

Halftoning then defines actual bit values of Cj by referring the pixel values of original images and errors diffused away. The 
w(S c [i]) in the algorithem is a hamming weight of a "OR"-ed row vector up to th rows in S c c c ' "' cn . It should be noted that 
the "OR"-ed row vector should not have any ci It should be noted that the "OR"-ed row vector should not have any cis are 
undefined values which can be defined as or 1 in halftone stage, we cannot ensure the contrast difference between matrices 

S() Cl,c2,...,cn andSi Cl,c2,...,c„ 

Distribution of Matrices Across Color Channels: 

The encryption process starts with basis matrices distribution by referring secret message pixels. The encryption 
shares should be in a form of 3-b per pixel because they will be the results of the halftoned shares. Furthermore, the secret 
message of size Kl *K2 should be halftoned ahead of the encryption stage as 

R(p,q) = [R(p,q) >R(p,q) . R(p,q) ] G{0,1} 

Where 1< p<Kl, 1< q<K2.R (pq) 

is a pixel of the message image at location(p,q) composed of three binary bits R( P>q ) C , R( P , q ) M , R( P ,q) Y representing values for 
Cyan, Magenta and Yellow color channels, respectively. Each message pixel composed of 3 bits encoded and expanded to 
subpixels of length in the encrypted shares as 

R(p,q') = [R(p,q) >R(p,q) . R(p,q) ] G{0,1} 

Where 



1< i< n 

P' = p.m R -(m R - 1) 
q' = q.m y -(m y - 1) 
m= m R . m y 

m R and m y are nonnegative integers and decide the aspect ratio of encryption shares. The S c c1 ' c2 '" cn [i] is the ith 

row of the matrix S c c1 ' c2 cn Each R( pq )' corresponds to subpixels on three channels starting at the position (p,q) and each 

subpixel takes one of the rows in So c ,c ' " " cn or Si c ' c ""' cn according to the bit value of the corresponding color channel of the 
message pixel. 

This algorithm produces encryption shares Ri An example of the matrices distribution for (2, 2) -color EVC scheme 
is depicted in Fig.6. Fig. 6(a) shows the matrices distribution along with each message pixel. Each binary bit on three color 
channels of message pixel is expanded into four subpixels on corresponding color channels throughout the encryption shares 
by taking the matrix S and Si according to its bit value. Since the VIPs are placed at the same spot on the ith row in matrices 
S and St each encrypted subpixels has the VIPs at the same positions throughout the color channels, where colored in gray 
in the figure. 

This feature makes the shares carry accurate colors of the original image after encryption. Fig. 6(b) depicts a 
decryption mechanism by the unit of subpixels showing how they present the desired color of the original message pixel. 
Regardless of the VIP values which will be decided in the error diffusion stage, the decrypted subpixels reveal the color of 
the message pixel R( M ) with 1/4 contrast loss. Since the matrices Si and So with 1/4 contrast loss. Since the matrices are 
derived in a way that the contrast difference is alpha , the decrypted subpixels show the intended color of the message pixel 
with probability alpha . 
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Matrices Distribution: 

The algorithm produces n matrix distributed Shares Ri The random permutation for SO and SI is done 
independently in standard VC schemes having one color channel. On the contrary, the random permutation of our scheme 

should be executed for S cl ' c2 '" ' cn and Si° ,c2 en at the same time, denoted as P(S cl ' c2 ""' C11 , Sj cl ' c2 "" ,cn ) since each row in the 

matrices has VIPs and their positions are correlated between S cl ' c2 ' "" cn and Si cl ' c2 ' " " cn This feature should be reflected on the 
permutation process so as to preserve the VIP structure. 

Procedure Matrices Distribution: 

1 /n c cl,c2,...,cn c cl,c2,...,ctl\ 
l.(K, ^o . »l ) 

2.Forl< a<Kl, 1< b < K2 do 

3. Find the starting pixel position on share R' 

A' = a.m R -(m a - 1) 

B' = b.m y -(m b -l) 
4. Conduct random column permutation, 

A /c cl,c2,...,cn o cl,c2,...,cn\ 
A \JQ , 0\ ) 

5. For the color channel C R( P , q ) L do 

6. If the bit R( P . q ) C then Place ith row of the S i° ' c ' "' cn to [R( P] q) C ] 1 of the size m R by m y . 
[R(p,q) C ]' g° es to the channel C of the ith share. 

7. Else if the bit R(p,q) C =0; then Place ith row of the So c ' '" ' cn to [R(p.q) 1 '] 1 of the size m R by m y [R^q) ] 1 goes to the 
C channel of the ith share 

8. End if 

9. End for 

10. Repeat 5 to 9 for the channel M and Y. 

1 1 . End for 

12. End procedure 

Share Generation via Error Diffusion: 

Once the distribution of the basis matrices is completed, a halftoning algorithm is applied to produce the final 
encrypted shares. Error diffusion is used in our scheme as it is simple and effective. The quantization error at each pixel is 
filtered and fed back to future inputs. Fig 6.1 shows a binary error diffusion diagram designed for our scheme. To produce 
the ith halftone share, each of the three color layers are fed into the input. The process of generating halftone shares via error 
diffusion is similar to that shown in Fig. 6.1 except that fij(m,n) is a (m, n) th pixel on the input channel j(l< i < n, 1< j < 3) 
of ith share. 

The other difference between our scheme from standard error diffusion is that the message information 
components, non , are predefined on the input shares such that they are not modified during the halftone process, i.e., the 
process is applied when the input is ci above Fig. depicts this process. Is and 0s in black are message information pixels that 
should not be modified and those are in red are VIPs that are already defined by the error diffusion. The ci are also VIPs 
whose values are to be decided by referring the corresponding pixel values of original images and errors from neighboring 
pixels when the error filter window comes. Non ci elements, however, still affect dij(m,n) and the quantization error eij(m,n) 
when they are calculated in the filter window. 

The non elements may increase quantization errors added to the shares, but in turn, these errors are diffused away 
to neighboring pixels. The measure of a particular halftoning algorithm is its performance in DC regions and its performance 
near edges or in areas of high frequency image content can be manipulated through prefiltering the image prior to halftoning. 
So the remedy for the apparent blurring of edges caused by the error diffusion algorithm is to apply an edge sharpening filter 
prior to halftoning such that 

R stap '[n]=R[n]-|3( ¥ [n]*R[n]) 
Where R[n] stands for the original image, v|/[n] is a digital Laplacian filter, * denotes convolution and (3 is a scalar constant 
((3 >0) regulating the amount of sharpening with larger (3 leading to a sharper image R 8 harp' Consequently, error diffusion 
produces high quality halftone images. The effectiveness of error diffusion can be confirmed in the simulation result section. 

V. SIMULATION RESULTS 

Results for 4 input -images: 
Secret image : 




4-Input Images: 



43 



A Secure Visual Cryptography for Color Images 




4-Encrypted Shares: 
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Decrypted Image: 




PSNR for Resultant Image: 

PSNR = 23.2748 

Percieved ERROR for Resultant Image: 
Perceived Error = 5.4527*10 s 



Results for 8-Input images: 
Secret Image: 




8-Input Images: 
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Encrypted shares: 
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Decrypted Image: 
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PSNR for Resultant Image: 

PSNR= 20.6179 

Percieved ERROR for Resultant Image: 

Perceived Error = 6.1209*10 

VI. CONCLUSION AND FUTURE SCOPE 

In this project we developed an encryption method to construct color EVC scheme with VIP synchronization and 
error diffusion for visual quality improvement. VIPs synchronize the positions of pixels that carry visual information of 
original images across the color channels so as to retain the original pixel values the same before and after encryption. Error 
diffusion is used to construct the shares where the noise introduced by the preset pixels are diffused away to neighbors when 
encrypted shares are generated. It is obvious that there is a tradeoff between contrast of encryption shares and the decryption 
share, however, we can recognize the colorful secret messages having even low contrast. Either VIP synchronization or error 
diffusion can be broadly used in many VC schemes for color images. 
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